Last Updated June 17, 2021
Thank you for choosing to be part of our community at Sefton Park Palm House, doing business as Sefton Park Palm House Preservation Trust. We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice, or our practices with regards to your personal information please contact us at email@example.com
When you visit our website https://palmhouse.org.uk and more generally, use any of our services we appreciate that you are trusting us with your personal information. We take your privacy very seriously. In this privacy notice, we seek to explain to you in the clearest possible way what information we collect, how we use it and what rights you have in relation to it. We hope you take some time to read through it carefully. If there are any terms in this privacy notice you disagree with, please discontinue use of our services immediately.
This privacy notice applies to all information collected through our services (which, includes our Website), as well as, any related services, sales marketing or events.
Please read this privacy notice carefully as it will help you understand what we do with the information we collect.
COMPLIANCE WITH GDPR, ARTICLE 30
Sefton Park Palm House complies with Article 30 of the GDPR. As a registered Data Controller, Sefton Park Palm House, Liverpool City Council and its partners will only process your personal data/information in accordance with the Data Protection Act 1998 and GDPR.
WHAT INFORMATION DO WE COLLECT?
IN SHORT: We collect personal information that you provide to us.
We may collect and process the following data about you: Information that you provide by filling in forms on our website https://palmhouse.org.uk (our “site”). This includes information provided at the time of completing a request for our e-newsletter. We may also ask you for information when you report a problem with our site or the services we provide.
If you contact us by letter or email, we may keep a record of that correspondence.
If you contact us by telephone, we may record our telephone conversation for training purposes.
We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
IP ADDRESSES AND COOKIES
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
If you leave a comment on our site, you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year. If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed. If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
WILL YOUR INFORMATION BE SHARED?
IN SHORT: We only share information with your consent, to comply with laws to provide you with services, to protect your rights, or to fulfil business obligations.
We may process or share your data if you have given us specific consent to use your personal information for specific purpose.
- Consent: We may process your data if you have given us specific consent to use your personal information for a specific purpose.
- Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests.
- Performance of a Contract: Where we have entered into a contract with you we may process your personal information to fulfil the terms of our contract.
- Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, a court order, or legal process, such as in response to a court order or subpoena (including in response to public authorities to meet national security or law enforcement requirements).
- Vital Interests: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.
More specifically, we may need to process your data or share your personal information in the following situations:
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- We may share your information with our affiliates, in which case we will require those affiliates to honour this privacy notice. Affiliates include our parent company and any subsidiaries, joint venture partners or other companies that we control or that are under common control with us.
- Business Partners. We may share your information with our business partners to offer you certain products, services or promotions
- Other Users. When your share personal information or otherwise interact with public areas of the Website, such personal information may be viewed by all users and may be publicly made available outside the Website in perpetuity. Similarly, other users will be able to view descriptions of your activity, communicate with you within our Website, and view your profile.
WHERE WE STORE YOUR PERSONAL DATA
Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. Specifically, your personal data will be stored in accordance with the Data Protection Act 1998.
HOW LONG DO WE KEEP YOUR INFORMATION?
IN SHORT: We keep your information for as long as necessary to fulfil the purposes outlined in this privacy notice unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements).
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
WHAT RIGHTS DO I HAVE WHEN IT COMES TO MY DATA?
Right to be informed: Through this Privacy Notice
Right of Access: You are entitled to request a copy of any information about you that we hold and to know what it is used for and how it has been shared. This is called the right of subject access. Any such requests must be made in writing. The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. Any access request may be subject to a fee of £10 to meet our costs in providing you with details of the information we hold about you.
To request a copy of your data or ask questions about how it is used, please email firstname.lastname@example.org
Right to rectification: If the information we hold about you is inaccurate you have a right to have this corrected and you have the right to request completion of incomplete data.
Right to object to processing: You have the right to request that we stop, or restrict the processing of your personal data, in certain circumstances. Where possible we will seek to comply with your request, but we may be required to hold or process information to comply with a legal requirement.
WHERE CAN I GET ADVICE?
If you have any worries or questions about how your personal information is handled please contact on email@example.com or by calling 0151 726 9304
YOUR FEEDBACK AND COMMENTS
Sefton Park Palm House welcomes your feedback and comments about this site.
We consider any feedback, comments or other material you post on this site, or send us through this site, as non-confidential. Sefton Park Palm House will be free to use this material, your feedback and comments, and any data transmitted with them in any way it requires.
You are prohibited from posting or sending any unlawful, threatening, libellous, defamatory, obscene, pornographic material to or from this site, or any other material that would break any law.
Sefton Park Palm House may monitor or review any areas of the site where users send or post communications, feedback, comments or other material. But Sefton Park Palm House has no liability related to these communications, feedback, comments or materials.
Our premises are protected by CCTV so you may be recorded when you visit us. CCTV images are being monitored and may be recorded for the purpose of public safety, crime prevention, detection and prosecution of offenders.
The system is managed in accordance with our standard operating procedures and with good practice guidance issued by issued by ICO. CCTV images are only accessed by authorised security staff and are stored for up to 30 days then deleted, unless flagged for review